Arteche Satech_bcu
8 CVEs affecting Arteche Satech_bcu. Latest disclosed: 2025-03-28. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-2859 | Critical | 9.8 | 2025-03-28 | An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the… |
CVE-2025-2858 | High | 8.8 | 2025-03-28 | Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with access to the CLI of the device could make use of the nice comman… |
CVE-2025-2863 | High | 7.8 | 2025-03-28 | Cross-site request forgery (CSRF) vulnerability in the web application of saTECH BCU firmware version 2.1.3, which could allow an unauthenticated local attacke… |
CVE-2025-2862 | High | 7.5 | 2025-03-28 | SaTECH BCU, in its firmware version 2.1.3, performs weak password encryption. This allows an attacker with access to the device's system or website to obtain t… |
CVE-2025-2861 | High | 7.5 | 2025-03-28 | SaTECH BCU in its firmware version 2.1.3 uses the HTTP protocol. The use of the HTTP protocol for web browsing has the problem that information is exchanged in… |
CVE-2025-2865 | Medium | 6.1 | 2025-03-28 | SaTECH BCU, in its firmware version 2.1.3, could allow XSS attacks and other malicious resources to be stored on the web server. An attacker with some knowledg… |
CVE-2025-2864 | Medium | 6.1 | 2025-03-28 | SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning the affected device, once the cookie is… |
CVE-2025-2860 | Medium | 5.3 | 2025-03-28 | SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the credentials that users have within the web (.xml fil… |